ThreatPaper
Verified

170 million identity documents were put up for sale

Assessment

The Nexus introductory post on Exploit advertised documents on "more than 170 million people in North America." The 153 million figure that dominates coverage counts driver's licences only; Nexus's itemised totals of 153 million licences, 10 million ID cards, 3 million travel documents and 579,000 medical cards sum to roughly 167 million records. The two figures are the same inventory at different granularity, not a discrepancy, and both are the seller's counts rather than the vendor's.

Where this claim appeared

Biometric Update · 2026-09-08

https://www.biometricupdate.com/202609/idscan-confirms-breach-after-170m-identity-documents-put-up-for-sale

What “Verified” means

Established by primary sources — the original disclosure, a vendor incident report, a court filing, a government advisory, or the affected party itself. Where a claim is material, at least two independent sources agree.

5 of 5 · rating scale

Assessed in

IDScan.net Breach: 153 Million Driver's Licence Scans and the Default Setting That Kept Them

Think this assessment is wrong? Report an error.